CVE-2021-41788

Vulnerability

CVE-2021-41788 affects MediaTek microchips, including MT7603E, MT7612, MT7613, MT7615, MT7622, MT7628, MT7629, and MT7915, with software version 7.4.0.0 [1]. The vulnerability involves mishandling of Wi-Fi authentication flooding attempts, as used in NETGEAR and other devices [2].

Exploitation

An attacker can exploit this vulnerability by sending a large number of Wi-Fi authentication requests from within wireless range. No authentication or user interaction is required. The device fails to properly handle the flood, leading to resource exhaustion [2].

Impact

Successful exploitation results in denial of service, causing the affected device to become unresponsive or crash, disrupting Wi-Fi connectivity for legitimate users [2]. The impact is limited to availability.

Mitigation

NETGEAR has released firmware updates for many affected products, including EAX11v2 (1.0.3.34), EX2700 (1.0.1.72), and WAX202 (1.0.5.1) [2]. Users should update to the latest firmware. No workarounds are available. For other devices, contact the manufacturer for patches. MediaTek's January 2022 security bulletin lists this CVE as medium severity [1].